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September  30,  1988 

The  Honorable  John  D.  Dingell 
Chairman,  Subcommittee  on  Oversight 
and  Investigations 

Committee  on  Energy  and  Commerce 
House  of  Representatives 


Dear  Mr.  Chairman: 

In  your  August  24.  1987,  letter  and  in  subsequent  discussions  with  our 
office,  you  requested  that  we  answer  four  questions  about  the  rood  and 
Drug  Administration’s  (fda)  planned  automated  Import  Support  and 
Information  System  (isis).  Our  detailed  responses  to  these  questions 
begin  on  page  2. 

As  you  know,4*A  is  developing  tsts  to  support  its  import  enforcement 
staff  and  improve  the  efficiency  and  effectiveness  of  import  operations. 
fda  plans  to  develop  isis  in  stages.  The  basic  system  will  be  developed 
during  the  initial  stage  and  is  primarily  intended  to  (1 )  track  products 
that  are  wharf  examined,1  automatically  detained,  or  sampled  and 
tested  for  compliance  with  regulations;  (2)  maintain  a  historical  data 
base;  and  (3)  provide  office  automation  capabilities,  fda  has  prepared  a 
system  design  document  outlining  the  initial  stage  and  plans  to  enhance 
the  system  in  later  stages,  fda  estimates  fiscal  year  1988  funding  for  isis 
to  be  $1.6  million  for  software  development  and  computer  hardware. 
Additional  background  information  is  included  as  appendix  I. 

In  preparing  its  initial  plans  for  isis,  fda  had  not  followed  some  impor¬ 
tant  automated  systems  development  practices  that  are  required  by  the 
Department  of  Health  and  Human  Services  (hhs).  These  practices  are 
consistent  with  Federal  Information  Processing  Standards^After  we 
pointed  out  mis’  system  development  requirements  to  fda  in  November 
1987,  it  took  some  actions  to  better  comply  with  them* However,  in 
finalizing  its  plans  to  develop  ISIS,  fda  has  not  taken  three  important 
steps  required  by  hhs.  These  required  steps  are  aimed  at  increasing  the 
probability  that  fda  will  (1)  competitively  procure  hardware  and  soft¬ 
ware  that  will  achieve  its  functional  requirements,  (2)  design  and  imple¬ 
ment  a  system  that  will  achieve  its  interface  requirements,  and  (3)  select 
the  most  appropriate  system  design  to  achieve  its  mission  requirements. 


1  Field  examinations  conducted  where  the  incoming  shipments  are  stored  to  ins|>ccl  products  and 
scrutinize  product  labels. 
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Responses  to 
Chairman’s  Questions 
on  the  Development  of 
ISIS 


fda  specified  vendor-specific  computer  hardware  and  software  that  are 
not  based  on  functional  requirements,  hhs’  guidelines  and  other  applica¬ 
ble  regulations  state  that  hardware  and  software  specifications  should 
be  described  in  terms  of  what  is  functionally  required  of  them.  There¬ 
fore.  there  is  an  increased  risk  that  fda  will  inappropriately  limit  compe¬ 
tition  and  procure  hardware  and  software  that  will  not  meet  its  needs. 

Although  fda  recognized  the  need  to  interface  ISIS  with  Customs’  auto¬ 
mated  systems,  fda  has  decided  to  postpone  identifying  the  interface 
requirements  until  after  isis  is  operational,  hhs’  guidelines  state  that 
interface  requirements  should  be  identified  and  planned  before  systems 
are  developed.  As  a  result,  there  is  an  increased  risk  that  isis  will  be 
unable  to  interface  with  Customs’  systems. 

fda  has  not  identified  alternative  system  designs  for  management  con¬ 
sideration.  hhs’  guidelines  state  that  alternative  system  designs  that  sat¬ 
isfy  functional  requirements  should  be  proposed  for  management 
consideration.  Consequently,  there  is  an  increased  risk  that  fda  will 
select  a  system  that  is  not  the  most  appropriate  to  meet  its  mission 
requirements. 

We  are  recommending  that  the  Secretary  of  hhs  take  steps  to  reduce  the 
risk  that  isis  may  not  satisfy  mission  needs  (see  p.  8). 

We  conducted  our  audit  from  September  1987  to  June  1988.  Our  objec¬ 
tives,  scope,  and  methodology  are  included  in  appendix  II. 


To  what  extent  is  fda  proceeding  in  accordance  with  generally  accepted 
system  development  procedures  and  applicable  regulations  in  the  devel¬ 
opment  of  ISIS? 

fda  has  not  completed  some  important  system  development  steps  as 
required  in  hhs’  guidelines.  System  development  life-cycle  guidelines  are 
commonly  used  methodologies  that  divide  the  automated  system  devel¬ 
opment  process  into  distinct  phases  and  allow  periodic  manegemert 
review.  According  to  Federal  Information  Processing  Standards,-  the  life 


Federal  Information  Processing  Standards  Publication  f>4.  Guidelines  for  Documentation  of  Com¬ 
puter  Programs  and  Automated  Data  Systems  for  the  Initiation  Phase  and  Publication  38.  Guidelines 
for  Documentation  of  C'ompuier  Programs  and  Automated  Data  Systems.  National  Bureau  of  Stan¬ 
dards.  Depar*  nient  of  Commerce. 
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cycle  has  three  phases:  (1)  the  project  request,  feasibility  study,  and 
cost-benefit  analysis  (initiation  phase);  (2)  the  identification  and  analy¬ 
sis  of  user  requirements,  system  design  and  specification,  development, 
and  testing  (development  phase);  and  (3)  system  implementation,  opera¬ 
tion,  and  maintenance  (operation  phase),  tins’  system  development 
guidelines,  contained  in  hhs’  Information  Resources  Management  Man¬ 
ual,  are  consistent  with  Federal  Information  Processing  Standards. 

As  part  of  the  initial  phase  of  isis,  a  feasibility  study  was  issued  in  Feb¬ 
ruary  1987.  Also,  in  February  1987,  the  Commissioner  formed  a  task 
force  to  develop  isis  as  recommended  in  the  feasibility  study.  In  Novem¬ 
ber  1987  the  task  force  issued  a  draft  design  document  describing  fda 
requirements  for  and  general  design  of  the  system.  Currently,  isis  is  in 
the  second  (development)  phase. 

On  November  4,  1987,  we  asked  fda’s  task  force  officials  whether  they 
followed  hhs’  system  development  guidelines,  as  required  in  Part  2  of 
nils'  Information  Resources  Management  Manual,  or  other  system  devel¬ 
opment  guidelines.  Task  force  officials  said  they  were  not  aware  of  and 
did  not  follow  hhs  or  other  system  development  guidelines  in  identifying 
requirements  and  preparing  the  system  design  document.  They  said 
they  planned  to  initiate  action  to  contract  for  the  acquisition  and  devel¬ 
opment  of  software  and  the  acquisition  of  hardware  as  soon  as  the  draft 
system  design  document  was  approved. 

We  analyzed  the  content  of  fda’s  February  1987  feasibility  study  and 
November  1987  draft  system  design  document  using  hhs’  system  devel¬ 
opment  guidelines.  While  fda  had  performed  much  of  the  initiation  and 
development  phase  work  required  by  hhs,  our  review  showed  that  fda 
had  not  performed  some  important  analyses  or  identified  some  basic 
system  requirements,  fda  specified  a  particular  make  and  model  of 
hardware  and  software  instead  of  specifying  its  requirements  in  func¬ 
tional  terms.  In  addition,  fda  did  not  identify  performance  objectives 
and  requirements  such  as  user  response  times,  external  interface 
requirements,  effects  on  the  current  organization  and  operation,  system 
failure  contingencies,  and  alternative  system  design  proposals. 

On  .January  28,  1988,  we  discussed  these  matters  with  task  force  offi¬ 
cials  and  fda’s  Deputy  Director,  Office  of  Regulatory  Resource  Manage¬ 
ment,  who  oversees  the  task  force.  These  officials  generally  agteed  with 


A  pi  on  n  request  in  a  i,,H  uiuuii  piopareu  by  a  user  organization  redevelop,  procure,  o;  a, » sidy 
automated  data  processing  ( ADI’)  supjiort  or  ojxTations. 
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the  results  of  our  analysis  and  stated  that  they  had  reviewed  mis’  sys¬ 
tem  development  guidelines,  taken  some  corrective  actions,  and  revised 
the  isis  design  document. 

Our  analysis  of  the  revised  draft  design  document  showed  that,  since 
our  November  1987  meeting,  the  task  force  had  made  progress  to  better 
identify  fda’s  isis  requirements.  However,  the  design  document, 
approved  in  May  1988,  still  does  not  meet  three  mis  requirements. 

First,  the  task  force  specified  a  particular  make  and  model  of  hardware 
and  software  instead  of  specifying  fda’s  computer  hardware  and  soft¬ 
ware  requirements  in  functional  terms,  as  required  in  mis’  Information 
Resources  Management  Manual.  The  functional  requirements  of  isis  do 
not  show  a  unique  need  that  would  justify  the  specification  of  a  particu¬ 
lar  hardware  or  software.  We  have  no  reason  to  believe  that  fda’s  func¬ 
tional  requirements  cannot  be  accomplished  by  other  available 
hardware  and  software. 

The  Federal  Information  Resources  Management  Regulations  (41  CFR 
201-11)  require  an  agency’s  acquisition  strategy  to  state  user  require¬ 
ments  in  the  least  restrictive  terms  possible  without  compromising  econ¬ 
omy  or  efficiency.  These  regulations  permit  a  make  and  model 
specification  only  when  no  other  type  of  specification  can  satisfy  the 
needs  of  the  government.  The  use  of  a  make  and  model  specification 
must  be  formally  justified.  According  to  the  Deputy  Director  of  the 
Office  of  Regulatory  Resource  Management,  the  only  justification  pre¬ 
pared  by  the  task  force  was  the  agency  procurement  request  itself.  The 
agency  procurement  request,  which  was  submitted  on  March  7,  1988, 
through  fda  for  approval  by  hhs,  did  not  include  a  justification  of  spe¬ 
cific  make  and  model.  This  increases  the  risk  that  fda  will  inappropri¬ 
ately  limit  competition  among  potential  vendors  and  procure  hardware 
and  software  that  will  not  meet  its  information  processing  work  load 
and  needs. 

Second,  the  task  force  did  not  follow  Hits’  Information  Resources  Man¬ 
agement  Manual,  which  requires  that  interface  requirements  be  identi¬ 
fied  and  planned  before  systems  are  developed.  As  a  result,  there  is  an 
increased  risk  that  fda  will  develop  and  implement  a  system  that  will  he 
unable  or  impractical  to  interface  with  Customs’  systems. 

Third,  the  task  force  proposed  only  one  system  design,  instead  ;,f  idenli- 
fying  alternatives  from  which  to  select  the  most  appropriate  automated 
system  design,  nits’  Information  Resources  Management  Manual  states 
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that  alternative  system  designs  to  satisfy  the  functional  requirements  of 
the  system  should  be  proposed  for  management  consideration.  Explor¬ 
ing  alternative  designs  reduces  the  risk  that  fda  will  select  a  system 
design  that  is  not  the  most  appropriate  to  meet  its  mission  requirements. 

What  assurance  does  fda  have  that  isis  will  interface  with  the  U.S.  Cus¬ 
toms  Service’s  automated  systems  and  capture  data  on  the  volume  and 
types  of  imported  products  subject  to  fda  regulation? 

fda  has  no  assurance  that  isis  will  be  able  to  interface  with  Customs’ 
automated  systems,  hhs  guidelines  require  identifying  interface  require¬ 
ments  before  systems  are  developed,  fda’s  task  force  has  recognized  the 
need  to  identify  and  plan  for  fda’s  interface  requirements,  but  it  has  not 
adequately  dealt  with  the  issue.  The  task  force  is  postponing  these 
actions  until  after  the  basic  isis  system  is  developed  and  operational 
because  fda  and  Customs  officials  have  been  unable  to  agree  on  the  spe¬ 
cifics  of  an  automated  interface. 

Postponing  such  action  could  jeopardize  fda’s  planned  interface  with 
Customs’  systems  in  later  stages  of  isis.  The  interface  is  intended  to  (1) 
provide  two-way  electronic  communication  among  Customs,  importers, 
and  fda;  (2)  electronically  capture  data  on  all  import  entries  within  fda’s 
jurisdiction;  and  (3)  eliminate  most  of  the  paper  transactions  among  fda, 
Customs,  and  importers.  Task  force  officials  agreed  that  there  may  be 
problems  when  the  interface  is  attempted  at  a  later  stage  of  isis. 

Correspondence  between  Customs  and  fda  shows  that  officials  recognize 
the  need  to  agree  on  an  automated  interface,  and  have  discussed  devel¬ 
oping  it  since  at  least  1984.  However,  they  have  not  agreed  on  the 
details  of  an  automated  interface,  officials  said,  because  of  different 
operating  practices  and  needs  of  the  agencies. 

One  problem  cited  is  that  Customs  and  fda  use  different  product  coding 
schemes  to  classify  imports.  The  agencies  have  not  agreed  on  a  coding 
scheme  that  would  satisfy  both  because  the  different  coding  systems 
serve  different  needs,  fda’s  task  force  and  Imports  Operations  Branch 
officials  believe  that  the  product  codes  in  Customs’  automated  data 
bases  do  not  give  sufficient  detail  for  fda’s  needs  and  therefore  would 
lessen  the  usefulness  of  an  automated  exchange  of  information  from 
Customs'  systems.  For  example,  fda  officials  need  information,  such  as 
the  type  of  packaging  and  size  of  container,  to  enforce  fda  regulations. 
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This  is  not  in  the  Customs  data  base.  Also,  some  plastics,  which  are  con¬ 
sidered  to  be  medical  devices  under  fda  regulations,  are  not  coded  by 
Customs  so  that  fda  can  recognize  them  as  such. 

Another  difference,  cited  by  the  Director  of  fda’s  Import  Operations 
Branch,  is  the  need  for  fda  to  collect  data  on  all  regulated  imports.  Cus¬ 
toms  collects  data  on  only  those  imports  above  certain  dollar  limitations. 
In  commenting  on  our  report,  Customs  said  it  does  collect  data  on  entries 
below  the  dollar  limitations  when  they  are  transmitted  electronically 
from  tinkers. 


[sis  and  Customs’  Automated  Commercial  System, 1  the  system  that 
processes  import  data  provided  by  brokers,  also  has  characteristics  that 
increase  the  risk  of  problems  with  an  interface.  For  example,  fda  task 
force  officials  told  us  that  if  fda  asked  Customs  to  detain  a  product  of  a 
specific  importer  at  a  specific  port,  Customs’  Automated  Commercial 
System  would  not  direct  the  detainment  message  only  to  the  port 
requested.  Instead,  on  the  basis  of  current  automated  piocedures.  the 
Automated  Commercial  System  would  send  the  detainment  message  to 
all  ports.  In  commenting  on  our  report,  Customs  said  it  has  the  ability, 
through  other  systems,  to  target  a  specific  importer  at  a  specific  port  if 
requested  by  fda. 

Does  fda  plan  to  use  isis  to  collect  data  on  the  volume  and  types  of  all 
FDA-regulated  imported  products’? 

As  now  planned,  fda  will  not  collect,  in  isis,  data  on  the  volume  and 
types  of  products  of  all  FDA-regulated  imports,  isis  is  to  collect  data  only 
for  those  imports  that  are  wharf  examined,  automatically  detained,  or 
sampled  by  fda,  but  not  those  that  are  released  for  entry  into  the  coun¬ 
try  without  further  action.  According  to  the  Deputy  Director  of  the 
Office  of  Regulatory  Resource  Management,  this  means  that  the  isis  his¬ 
torical  data  base  will  include  information  on  only  approximately  2  per¬ 
cent  of  the  entries. 

The  isis  feasibility  study  concluded  that  volume  data  on  all  imports 
would  not  be  collected.  Only  information  on  entries  sampled  or  automat¬ 
ically  detained  would  be  a  part  of  the  isis  historical  data  base.  This  was 
done  to  keep  fda’s  data  entry  work  load  to  a  minimum,  since  no  inter¬ 
face  would  be  initially  established  with  Customs  or  the  brokers  to 


'  A  sy  fern  that  is  intended  In  automate  all  of  Customs'  enmmereial  operations  into  one  integrated 
system 
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receive  data  electronically,  kda’s  task  force  agreed  witn  the  study’s  con¬ 
clusion.  According  to  task  force  officials,  fda  has  no  plans  to  collect  total 
volume  data  in  the  initial  stage  of  isis. 

The  collection  of  volume  data  by  fda  was  the  subject  of  a  prior  gao 
report'  and  testimony  before  the  Congress.’  In  addition,  a  requirement  to 
collect  volume  data  on  imported  food  products  is  contained  in  The  Omni¬ 
bus  Trade  and  Competitiveness  Act  of  1988,  signed  into  law  on  August 
23,  1988. 

In  our  September  1986  report,  we  found  that  many  imported  foods  were 
not  being  sampled  ai  d  tested  by  fda  for  pesticide  residues  even  though 
they  were  being  imported  into  the  United  States  year  after  year.  We 
pointed  out  that  fda  needs  to  improve  the  range  of  imported  foods  that 
are  sampled.  We  also  said  that  to  assist  in  analyzing  its  commodity  cov¬ 
erage  and  selecting  foods  to  be  sampled,  fda  should  prepare  a  compre¬ 
hensive  monitoring  summary  containing  the  following  information: 
commodities  being  imported,  country  of  origin,  volume,  number  of  sam¬ 
ples  taken,  and  number  of  violations. 

In  the  December  1987  hearings  before  the  Subcommittee  on  Health  and 
the  Environment,  House  Committee  on  Energy  and  Commerce,  on  H.K. 
3504,  an  earlier  bill,  we  testified  in  support  of  requiring  the  collection  of 
volume  data  on  imported  foods.  We  said  that  collection  of  these  data  are 
necessary  to  provide  a  greater  assurance  that  fda's  monitoring  program 
is  able  to  detect  serious,  recurring  pesticide  residue  violations.  However, 
fda's  Commissioner  testified  that  the  legislation  was  unnecessary 
because  fda  already  had  plans  to  build  isis  to  track  the  results  of  its 
sampling  and  testing  program  and  implement  the  recommendations  of 
fda’s  Chemical  Contaminants  Data  Project  Workgroup.  The  workgroup 
recommended  collecting  more  information  on  pesticides  and  other 
contaminants. 

The  trade  act  requires  fda  to  provide  a  summary  of  the  volume  of  each 
type  of  imported  food  subject  to  fda  regulation  that  has  an  entry  value 
over  the  threshold  to  be  established  by  the  hhs  Secretary.  The  trade  act 
also  states  that,  to  the  extent  feasible,  information  with  respect  to 
volumes  of  food  products  should  be  obtained  from  data  bases  of  other 
federal  agencies.  The  act  requires  the  information  to  be  summarized 

Pesticides:  Better  Sampling  and  Enforcement  Needed  on  Imported  Food  (GAO  RCED-86-219.  Sept. 
26.  1986). 

'  H  R.  3504:  Pesticide  Monitoring  Improvements  Act  (GAO  TRCED-88-12.  Per  14.  1!»H7) 
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annually  and  made  available  to  federal  and  state  agencies  and  other 
interested  persons. 

The  trade  act  requires  fda  to  collect  volume  data  on  food  imports,  but 
the  act  does  not  limit  fda  to  using  isis  as  its  only  option.  If  fda  decides  or 
is  required  to  collect  in  isis  such  volume  data,  changes  would  be  needed 
in  the  system  design  and  statement  of  functional  requirements.  Without 
an  automated  interface  with  Customs,  data  entry  would  increase,  and 
the  required  processing,  storage,  and  telecommunications  capacities  of 
the  new  system  would  increase  because  the  data  base  and  number  of 
input  transactions  would  be  much  larger. 

To  what  extent  will  isis  be  compatible  with  existing  fda  systems  such  as 
the  Laboratory  Management  System,  including  chemical  contaminants 
data  which  are  to  be  added  to  the  Laboratory  Management  System,  as 
suggested  by  the  Chemical  Contaminants  Data  Project  Workgroup? 

fda’s  task  force  determined  that  isis  and  the  Laboratory  Management 
System  are  compatible  and  proposed  that  an  interface  be  included  in  the 
initial  stage  of  isis.  Such  an  interface  would  provide  isis  users  with 
access  to  chemical  contaminants  data  through  the  Laboratory  Manage¬ 
ment  System. 

After  reviewing  the  isis  design  document  and  Laboratory  Management 
System  specifications,  it  appears  that  the  proposed  isis  and  the  Labora¬ 
tory  Management  System  will  be  compatible.  However,  we  cannot  be 
certain  that  isis  will  be  compatible  with  the  Laboratory  Management 
System  or  other  fda  systems  until  the  detailed  design  specifications  for 
isis  are  developed  and  the  system  is  tested. 


Conclusions 


fda  has  not  followed  some  of  hhs’  system  development  requirements  and 
we  have  seen  no  indication  that  it  plans  to  take  action  to  comply  with 
those  requirements.  If  fda  does  not  comply  with  the  requirements,  it  will 
increase  its  risks  that  the  system  may  not  satisfy  mission  requirements 
in  a  timely  and  effective  manner. 


Recommendations 


We  recommend  that  the  Secretary  of  Health  and  Human  Services  take 
steps  to  ensure  that  the  Food  and  Drug  Administration  complies  with 
mis'  requirements  to  ( 1 )  identify  and  specify  fda’s  computer  hardware 
and  software  requirements  for  isis  in  functional  terms,  rather  than  spec¬ 
ifying  vendor-specific  computer  hardware  and  software;  (2)  identify 


Patfe  8 


GAO/IMTEO-88-42  FDA's  Import  Information  System 


B-228873 


fda’s  requirements  for  an  isis  automated  interface  with  Customs,  and 
obtain  an  agreement  on  a  plan  to  implement  the  automated  interface; 
and  (3)  explore  feasible  alternative  system  designs  to  meet  the  func¬ 
tional  requirements  of  isis. 


Agency  Comments  and 
Our  Evaluation 


Hus’  and  Customs’  comments,  together  with  our  evaluation,  are  con¬ 
tained  in  appendixes  III  ana  IV.  See  pages  17  and  27  for  more  details. 

hhs  did  not  agree  with  our  first  recommendation  that  fda  identify  and 
specify  its  requirements  in  functional  terms  rather  than  in  vendor-spe¬ 
cific  terms,  mis  stated  that  a  principal  departmental  strategy  is  to 
evolve  existing  systems  in  the  direction  of  open  architecture  to  ensure  a 
more  competitive  environment,  hhs  believes,  at  this  time,  that  fda’s 
extensive  investment  in  its  current  equipment,  commitment  to  a  specific 
proprietary  software  package,  need  for  hardware  and  software  that  is 
directly  compatible  with  existing  systems,  and  need  to  interface  with 
existing  information  systems  is  very  strong  justification  for  specifying 
requirements  in  vendor-specific  terms,  hhs  did  not  provide  any  analysis 
or  justification  to  support  its  belief.  As  we  state  on  page  4,  the  isis  design 
document,  the  only  existing  documentation  of  requirements,  does  not 
show  a  unique  need  that  would  justify  the  specification  of  a  particular 
hardware  or  software,  hhs  said  that  a  justification  to  support  the  acqui¬ 
sition  on  specific  make  and  model  is  being  developed  and  will  be 
approved  before  proceeding. 


hhs  concurred  with  our  second  recommendation  and  stated  that  fda  will 
continue  to  negotiate  with  Customs  on  unresolved  problems  and  develop 
an  automated  interface  that  will  be  implemented  as  soon  as  practical. 


hhs  concurred  with  our  third  recommendation,  hhs  stated  that  fda  had 
explored  alternative  designs  for  isis  and  will  now  document  those 
exploratory  efforts. 

Customs  generally  agreed  with  our  conclusions  and  recommendations. 
We  clarified  two  points  suggested  by  Customs.  (See  p.  6.)  Customs  also 
said  that  as  part  of  an  ongoing  effort  to  cooperate  with  fda,  it  is  imple¬ 
menting  a  work  plan  to  assist  fda  in  developing  a  future  interface. 
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As  arranged  with  your  office,  unless  you  publicly  announce  its  contents 
sooner,  we  plan  no  further  distribution  of  this  report  until  20  days  from 
the  date  of  this  letter.  At  that  time,  we  will  make  copies  available  to  fda, 
Customs,  and  other  interested  parties  upon  request. 


Sincerely  yours, 


Ralph  V.  Carlone 
Direr  .or 
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Abbreviations 
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Background 


fda’s  overall  mission  is  to  protect  the  public  from  any  domestic  or 
imported  food,  drug,  or  health-related  device  that  might  threaten  public 
health.  The  number  of  imports  subject  to  fda  regulation  has  increased 
threefold  since  the  mid-1970s,  from  500,000  to  over  1.(5  million  entries 
as  estimated  by  fda  for  1987. 

Currently,  fda’s  import  enforcement  operations  are  largely  accom¬ 
plished  without  the  daily  support  of  automated  systems.  Some  district 
offices  have  developed  local  historical  data  bases,  but  there  is  no  auto¬ 
mated  system  capability  to  share  this  information  with  other  district 
offices  or  compile  the  data  for  nationwide  oversight. 

The  Fr.\  Commissioner  has  put  a  priority  on  improving  import  opera¬ 
tions,  including  increased  automated  support.  In  February  1987,  the 
Commissioner  formed  the  National  Import  Data  System  Task  Force, 
composed  of  three  district  compliance  officers  and  a  district  director, 
who  is  chairman.  The  task  force  was  to  develop  a  new  automated  sys¬ 
tem  as  recommended  in  a  contractor-prepared  feasibility  study  issued 
on  February  18,  1987.  In  November  1987,  the  task  force  issued  a  draft 
design  document  for  isis,  which  called  for  a  system  to  provide  up-to-date 
information  to  all  field  offices  on  imports  that  have  been  tested  ano 
identify  trends  and  problems  for  products  that  do  not  meet  fda  regula¬ 
tions.  The  design  document  was  approved  by  FDA’s  Office  of  Regulatory 
Resource  Management  in  May  1988.  The  task  force  prepared  an  agency 
procurement  request  to  obtain  authority  to  procure  software  develop¬ 
ment  services. 

The  Deputy  Director  of  the  Office  of  Regulatory  Resource  Management 
stated  that  fda  is  planning  a  software  development  contract,  but  that  it 
would  not  be  awarded  until  at  least  the  fourth  quarter  of  fiscal  year 
1988.  He  added  that  the  first  pilot  test  is  scheduled  for  spring  1989.  As 
of  June  14,  1988,  fda  had  not  purchased  computer  hardware  or  software 
development  services  for  isis. 


1  KI)A  made  t his  estimate  on  th  •  basis  of  |B84  data  in  its  document.  A  Plan  For  Action.  Pba.sc  II.”  In 
11185.  the  definition  of  an  entry  changed  from  a  product  or  group  of  products  valued  at  $251 1  or  more, 
to  those  valued  at  $1,000  or  more. 

A  feasibility  study  is  a  document  that  (1  i  analyzes  automation  object ives,  requirements,  and  system 
conn  *|  its;  ( 2 )  evaluates  alterant  ive  approaches,  and  (8 )  cl  a  wises  a  promised  approach 
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i 


Our  objectives  were  to  answer  the  Subcommittee’s  questions  about  the 
development  of  fda’s  isis.  The  Subcommittee  asked  us  to  determine  (1)  to 
what  extent  fda  is  proceeding  with  generally  accepted  computer  system 
development  procedures  and  applicable  regulations;  (2)  what  assurance 
fda  has  that  isis  will  interface  with  Customs’  automated  systems; 

(3)  whether  fda  plans  to  collect  volume  and  type  of  product  data  on  all 
imports  in  isis  or  through  an  automated  interface  with  Customs;  and 

(4)  to  what  extent  isis  will  be  compatible  with  internal  fda  systems,  such 
as  the  Laboratory  Management  System,  and  include  chemical  contami¬ 
nants  data  as  recommended  by  the  Chemical  Contaminants  Data  Project 
Workgroup. 

To  determine  to  what  extent  fda  is  proceeding  in  accordance  with  gener¬ 
ally  accepted  computer  system  development  procedures  and  applicable 
regulations,  we  interviewed  members  of  the  National  Import  Data  Sys¬ 
tem  Task  Force,  and  reviewed  (1)  the  feasibility  study  for  the  auto¬ 
mated  import  data  system,  (2)  the  isis  design  document  revised  as  of 
May  1988,  and  (3)  task  force  subgroup  draft  reports. 

We  compared  the  contents  of  these  documents  with  system  development 
guidelines  contained  in  the  hhs  Information  Resources  Management 
Manual  (November  1985),  Federal  Information  Processing  Standards 
Publications  (FIPS  PUBs  38.  64,  65,  73,  101,  and  102),  and  one  commer¬ 
cial  methodology  used  in  private  industry.  Since  ISIS  has  not  been  identi¬ 
fied  as  a  major  system  under  the  definition  of  OMB  Circular  A- 109,  and 
is  therefore  not  subject  to  the  circular’s  provisions  regarding  the  acquisi¬ 
tion  of  major  systems,  we  did  not  review  fd\’s  adherence  to  these 
requirements.  We  discussed  the  results  of  our  analysis  with  the  Deputy 
Director  of  the  Office  of  Regulatory  Resource  Management  and  import 
task  force  officials. 

We  reviewed  the  isis  design  document  and  correspondence  between  fda 
and  Customs,  and  interviewed  fda  task  force  officials  to  determine  what 
assurance  fda  has  that  isis  will  interface  with  Customs’  automated  sys¬ 
tems.  We  also  reviewed  the  general  design  of  Customs’  automated  sys¬ 
tems  (the  Automated  Commercial  System  and  the  Automated  Broker 
Interface)  and  the  data  available  to  fda  through  these  Customs’  systems, 
and  interviewed  Customs  officials  about  the  interface. 

To  determine  if  fda  will  capture,  in  isis  or  through  an  interface  with 
Customs,  data  on  volume  and  type  of  imported  products  subject  to  fda 
regulation,  we  reviewed  the  feasibility  study  and  isis  design  document, 
and  interviewed  the  Deputy  Director  of  the  Office  of  Regulatory 
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Resource  Management  and  task  force  members.  We  analyzed  draft  bill 
H.R.  3504,  “Pesticide  Monitoring  Improvements  Act,”  and  the  trade  bill, 
H.R.  4848,  Subtitle  G,  “Pesticides  Monitoring  Improvements  Act  of 
1988,”  which  required  fda  to  collect  and  summarize  volume  data  on  all 
imports  above  a  value  established  by  Hits.  The  latter  bill,  entitled  “The 
Omnibus  Trade  and  Competitiveness  Act  of  1988,”  was  signed  into  law 
on  August  23,  1988. 

To  determine  the  extent  to  which  isis  will  be  compatible  with  other  fda 
systems,  such  as  the  Laboratory  Management  System,  and  include  the 
recommendations  of  the  Chemical  Contaminants  Data  Project  Work¬ 
group,  we  reviewed  the  isis  design  document  and  the  isis/Laboratory 
Management  System  interface  subgroup  draft  report.  We  also  inter¬ 
viewed  the  Deputy  Director  of  the  Office  of  Regulatory  Resource  Man¬ 
agement  and  import  task  force  members  about  the  proposed  interface. 

We  conducted  our  review  from  September  1987  to  June  1988.  We  did  not 
assess  the  need  for  isis  or  determine  if  its  functional  requirements  were 
appropriately  specified  by  fda.  We  obtained  agency  comments  from  fda 
and  Customs  and  have  incorporated  them  where  appropriate.  Our  work 
was  performed  in  accordance  with  generally  accepted  government 
auditing  standards. 
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report  text  appear  at  the 
end  of  this  appendix 


AUG  8  1988 


Mr.  Lawrence  H.  Thompson 
Assistant  Comptroller  General 
U.S.  General  Accounting  Office 
Washington,  D.C.  20548 

Dear  Mr.  Thompson: 

Enclosed  are  the  Department's  comments  on  your  draft  report,  "ADP 
Systems:  FDA  Can  Reduce  Development  Risks  for  Its  Import 

Information  System."  The  enclosed  comments  represent  the 
tentative  position  of  the  Department  and  are  subject  to 
reevaluation  when  the  final  version  of  this  report  is  received. 

The  Department  appreciates  the  opportunity  to  comment  on  this 
draft  report  before  its  publication. 

Sincerely  yours, 

\  l  U-'P-v.*.*-  — '■ 

Richard  P.  Kusserow 
Inspector  General 

Enclosure 
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See  comment  1. 


See  comment  2 


See  comment  2. 


See  comment  3 


COMMENTS  OF  THE  DEPARTMENT  OF  HEALTH  AND  HUMAN  SERVICES  ON  THE 
GENERAL' ' ACCOUNTING'  UFFTL'E T S  U HAITI'  HEPURTT" "ATTP 'SYSTEMS;  FDA  CAN 

Reduce  DEVELOPMENT  ri8Ks  for  its  IMP6M  I WPOftMATIfitT  SYSTEM" 


General  Comments 

We  appreciate  the  opportunity  to  review  the  draft  report.  As 
noted  by  GAO,  the  Food  and  Drug  Administration  (FDA)  has  made 
efforts  to  comply  with  the  Department's  guidelines  for  system 
development  when  the  requirements  were  made  known  to  Agency 
officials.  Further  efforts  to  comply  are  underway  and  will 
continue  until  all  required  documentation  has  been  completed. 

While  we  believe  that  FDA's  use  of  Digital  Equipment  Corporation 
(DEC)  equipment  is  appropriate  for  the  Import  Support  and 
Information  System  (ISIS),  we  also  recognize  the  disadvantages  of 
over-reliance  on  the  products  of  a  single  vendor.  When  an 
application  is  locked  in  to  a  single  product  line  there  are  often 
limitations  on  the  variety  of  hardware  and  software  available. 
Functionality  and  flexibility  can  also  be  limited,  and  prices  can 
be  higher  than  those  that  prevail  in  markets  with  multiple 
compatible  vendors.  For  these  and  other  reasons  it  is  a 
principal  strategy  of  our  Department  to  evolve  existing  systems 
in  the  direction  of  open  architectures  and  to  establish 
portability  platforms  for  major  application  systems.  Following 
this  strategy  will  ensure  that  future  acquisitions  to  support 
ISIS  will  occur  in  a  more  competitive  environment  and  there  will 
be  a  broader  variety  of  equipment  and  software  from  which  to 
choose . 

Nevertheless,  we  remain  convinced,  at  this  time,  that  in 
implementing  this  system,  FDA  has  a  compelling  need  to  procure 
computer  equipment  and  software  that  is  directly  compatible  with 
its  existing  equipment  and  software.  Ail  FDA  field  offices  (22 
district  offices,  six  regional  offices,  and  numerous  resident 
posts)  and  the  headquarters  Office  of  Regional  Operations 
currently  use  DEC  equipment.  The  current  plan  for  the  ISIS 
system  calls  for  procurement  of  additional  computers  to  be 
assigned  to  districts  having  heavy  import  responsibilities  and 
enhancement  of  the  existing  computers  in  districts  dealing  with  a 
lower  volume  of  imported  products.  Further,  rapid  communication 
with  ail  districts  and  headquarters  is  essential  if  the  challenge 
of  dealing  with  an  ever-increasing  import  workload  on  a  national 
basis  is  to  be  met.  The  proposed  DEC  equipment  is  necessary  to 
facilitate  this  communication. 

Prior  to  purchasing  FDA's  current  DEC  equipment,  FDA  conducted  a 
thorough  analysis  of  its  requirements  and  the  equipment  and 
services  available  to  meet  those  requirements.  FDA's  offices  are 
widely  dispersed  across  the  Nation  and  each  must  be  functionally 
independent  while  also  having  the  ability  to  communicate  quickly 
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See  comment  4 


See  comment  5 


See 


com  moot  5 


See  co'n rr  ent  6 


among  other  offices  as  well  as  with  headquarters.  The  FDA 
determined  that  a  decentralized  system  that  wouid  pxace  computers 
as  close  t.o  the  primary  user  as  possible  would  best  meet  its 
needs.  The  DEC  equipment  was  selected  based  on  these  and  otheL 
relevant  factors. 

As  discussed  with  GAO,  FDA  has  a  sizeable  investment  in  DEC 
equipment,  personnel  training  and  expertise,  and  support  inn 
software.  We  believe  that  it  would  not  be  cost  effect  ive  and  in 
the  best  interest  of  FDA  to  disrupt  the  current  import  operations 
to  accommodate  computer  equipment  and  softwaie  that  is  not 
totally  intetcharigeabiO  ^ith  the  existing  computet  and  software 
system  currently  in  operation  at  FDA's  regional  offices.  FDA 
plans  to  utilize  the  new  computer  equipment  as  backup  for  the 
exist.inq  system  as  necessary.  Further,  we  believe  the  added 
system  reliability  afforded  by  having  interchangeable  backups  for 
FDA's  current,  information  systems,  as  well  as  ISIS,  wiri 
strengthen  and  make  mote  efficient  the  import  product  operation 
capabilities  of  FDA. 

GAO  Recommendation 

We  recommend  that  the  Secretary  of  Health  and  Human  Services  take 
steps  to  ensure  that  the  Food  and  Drug  Administration  comply  with 
HHS ' s  requirements  to: 

1.  Identify  and  specify  FDA's  computer  hardware  and  software 
requirements  for  ISIS  in  functional  terms,  rather  than 
specifying  vendor-specific  computer  hardware  and  softwaie. 

Department  Comment 

We  do  not  concur.  Subsequent  to  the  GAO  review,  necessary 
approvals  were  obtained  from  the  Office  of  the  Secretary  and  the 
General  Services  Administration  on  both  the  equipment  and  the  FDA 
ADP  support  services  and  proprietary  software  for  the  ISiS. 
Additionally,  in  accordance  with  HHS  procurement  regulations  a 
just i ficat ion ( s )  to  support  the  acquisition  on  specific  make  and 
model  basis  is  being  developed  and  will  be  approved  before 
proceeding . 

As  discussed  above,  the  extensive  investment  in  the  DEC 
equipment,  coupled  with  FDA's  commitment  to  the  ORACLE  software, 
and  the  need  to  interface  with  existing  information  systems  is 
very  strong  justification  for  being  vendor-specific  in  detailing 
hardware  and  software  requirements,  particularly  after  having 
thoroughly  justified  the  original  investment  in  the  DEC 
egu ipment . 

Another  consideration  at  this  time  is  the  need  to  proceed  with 
bringing  ISIS  on-line  as  quickly  as  possible.  FDA  began  its 
efforts  to  modernize  import  operations  some  time  ago  to  rectify 
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See  comment  7 


See  comments  7  and  8 


an  increasingly  cumbersome  approach  to  this  very  critical  element 
of  its  public  health  mission.  Some  members  of  Congress  and 
Committees  have  recognized  the  importance  of  implementing  an  up- 
to-date  import  operations  system  and  have  held  numerous  hearings 
focused  on  this  issue. 

We  believe  that  to  interrupt  the  process  at  this  time  to 
restructure  hardware  and  software  requirem^  its  in  a  more  genetic 
manner  would  further  delay  the  acquisition  of  the  much  needed 
computet  equipment  which  will  significantly  improve  the  FDA 
import  information  system. 

GAO  Recommendation 

2.  Identify  FDA's  requirements  for  an  ISIS  automated  interface 
with  Customs,  and  obtain  an  agreement  on  a  plan  to  implement 
the  automated  interface. 

Department  Comment 

We  concur.  FDA's  requirements  for  interface  with  Customs  have 
already  been  identified.  Data  requirements  for  an  ISIS/Customs 
ir.teiface  have  been  communicated  to  the  Customs  taskforce  with 
whom  FDA  is  working  and  will  continue  to  work  to  determine  how 
the  required  information  can  be  exchanged.  FDA  has  also  met  with 
representatives  of  the  brokers'  association  to  explore  the 
possibility  of  interface  among  brokers,  Customs,  and  FDA.  The 
primary  purpose  of  the  ISIS  system  i.s  to  automate  processing  and 
disposition  of  imported  products  so  FDA  can  increase  itB 
inspections!  productivity  and  expand  the  percentage  of  FDA- 
regulated  import  products  inspected  prior  to  release  in  the 
United  States  market.  We  believe  that  in  order  to  just  maintain 
its  current  coverage  of  imported  products,  FDA  must  automate  this 
critical  function. 

As  to  obtaining  an  agreement  with  Customs,  the  design  of  ISIS  is 
such  that  additional  functions  can  readily  be  added  without  the 
need  to  either  purchase  new  equipment  or  to  reconfigure  any 
software  or  applications.  FDA  will  continue  negotiations  with 
Customs  regarding  the  unresolved  problems  of  incompatible  product 
codes,  volume  data,  and  access  to  shipments  falling  below  the 
Customs  formal  entry  cutoff.  A  direct  interface  with  Customs 
will  be  effected  as  soon  as  practical. 

GAO  Recommendation 

3.  Explote  feasible  alternative  system  designs  to  meet  the 
functional  requirements  of  ISIS. 
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\  Department  Comment. 

We  concur.  Axter native  systems  designs  have  been  explored,  but 
not  fully  documented.  FDA  will  complete  documentation  of  those 
exploratory  efforts. 
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The  following  are  gao’s  comments  on  a  letter  dated  August  8,  1988. 
from  the  Department  of  Health  and  Human  Services.  The  letter  was 
transmitted  by  the  Inspector  General  of  mis. 


GAO  Comments 


1 .  mis  said  that  kda  made  efforts  to  comply  with  mis  guidelines  for  sys¬ 
tem  development  once  the  requirements  were  made  known  to  kda  offi¬ 
cials.  mis  stated  that  further  efforts  to  comply  are  underway  and  will 
continue  until  all  the  required  documentation  is  completed.  We  agree 
that  this  action  should  be  taken. 

2.  mis  said  that  its  principal  strategy  is  to  evolve  existing  systems  in  the 
direction  of  open  architecture  and  to  establish  portability  platforms  for 
major  application  systems.  According  to  mis,  following  this  strategy  will 
ensure  that  future  acquisitions  to  support  isis  will  occur  in  a  more  com¬ 
petitive  environment  and  there  will  be  a  broader  variety  of  equipment 
and  software  from  which  to  choose,  mis  said,  however,  that  regardless 
of  its  principal  strategy,  at  this  time,  FDA  has  a  compelling  need  to  pro¬ 
cure  computer  equipment  and  software  that  is  directly  compatible  with 
its  existing  equipment  and  software,  and  the  proposed  Digital  Equip¬ 
ment  Corporation  ( dfc)  equipment  is  needed  to  facilitate  communication 
among  the  districts  and  headquarters. 

We  agree  with  mis’  stated  strategy  to  evolve  its  systems  to  ensure  a 
competitive  environment.  We  believe,  however,  that  kda  has  not  demon¬ 
strated  a  compelling  need  or  justified  its  use  of  vendor-specific  specifica¬ 
tions  for  this  procurement,  mis  did  not  provide  any  analysis  or 
justification  to  support  its  belief.  As  we  state  on  page  4,  the  isis  design 
document,  the  only  existing  documentation  of  requirements,  does  not 
show  a  unique  need  that  would  justify  the  specification  of  particular 
hardware  or  software,  mis  said  that  a  justification  to  support  the  acqui¬ 
sition  on  specific  make  and  model  is  being  developed  and  will  be 
approved  before  proceeding.  See  our  response  under  comment  number  5 
for  a  further  discussion  of  this  issue. 

3.  mis  stated  that  prior  to  purchasing  its  current  dec  equipment,  kda  con¬ 
ducted  a  thorough  analysis  of  its  requirements  and  the  equipment  and 
services  available  to  moot  its  requirements.  The  dec  equipment  was 
selected  on  the  basis  of  these  and  other  relevant  factors. 

The  existing  automated  equipment  was  procured  before  isis  was 
designed,  and  therefore  the  isis  functional  requirements  were  not  consid¬ 
ered  as  part  of  that  procurement.  Thus,  we  believe  that  the  analysis  of 
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requirements  for  the  procurement  of  the  existing  dec  equipment  is  not 
adequate  justification  for  this  procurement  for  isis.  This  procurement 
should  be  based  on  the  functional  requirements  of  ISIS. 

4.  hhs  said  fda  has  a  sizable  investment  in  dec  equipment,  personnel 
training  and  expertise,  and  supporting  software,  hhs  believes  that  it 
would  not  be  cost  effective  and  in  the  best  interest  of  fda  to  disrupt  the 
current  import  operations  to  accommodate  computer  equipment  and 
software  that  is  not  totally  interchangeable  with  existing  equipment  and 
software,  hhs  said  that  the  added  system  reliability  afforded  by  inter¬ 
changeable  backups  will  strengthen  and  make  more  efficient  the  import 
product  operation  capabilities  of  fda. 

We  realize  that  fda  has  a  sizable  investment  in  personnel  training  and 
expertise  on  the  existing  systems  that  must  be  considered  as  a  cost  of 
procurement  as  provided  for  in  the  Federal  Information  Resources  Man¬ 
agement  Regulations  (41  CFR  201-11).  As  we  discuss  on  page  4,  fda  has 
not  formally  justified  its  make  and  model  specifications,  including  dem¬ 
onstrating  that  less  restrictive  terms  would  compromise  economy  or 
efficiency. 

5.  hhs  did  not  concur  with  our  recommendation  that  fda  comply  with 
hhs’  requirements  to  identify  and  specify  fda’s  computer  hardware  and 
software  requirements  for  isis  in  functional  terms,  rather  than  specify¬ 
ing  vendor-specific  computer  hardware  and  software,  hhs  stated  that, 
after  our  review,  fda  had  obtained  approvals  from  the  Office  of  the  Sec¬ 
retary  and  the  General  Services  Administration  for  both  the  equipment 
and  the  adp  support  services  and  proprietary  software  for  isis.  hhs  fur¬ 
ther  stated  that  in  accordance  with  its  regulations,  a  justification  to  sup¬ 
port  the  acquisition  on  specific  make  and  model  basis  is  being  developed 
and  will  be  approved  before  proceeding. 

hhs  cited  the  extensive  investment  in  dec  equipment,  fda’s  commitment 
to  ORACLE  software,  and  the  need  to  interface  with  existing  informa¬ 
tion  systems  as  very  strong  justification  for  being  vendor-specific  in 
detailing  its  hardware  and  software  requirements. 

We  asked  gsa  officials  to  confirm  whether  gsa  had  granted  approvals  for 
the  hardware  and  software  for  isis.  gsa  officials  told  us  that  they  had 
approved  the  adp  support  services  and  software  procurement.  They 
stated  that  for  this  procurement,  fda  said  it  will  contract  with  a  quali¬ 
fied  minority-owned  and  -operated  small  business  certified  under  sec¬ 
tion  8(a)  of  the  Small  Business  Act  to  provide  the  initial  conceptual 
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design  and  implement  a  pilot  test  of  isis.  They  also  said  the  contractor, 
acting  as  the  government’s  agent,  will  negotiate  the  best  available  price 
for  the  acquisition  and,  according  to  kda,  all  associated  procurements 
will  be  fully  competitive. 

The  usa  officials  stated  they  had  not  approved  the  hardware  procure¬ 
ment.  They  said  usa  received  a  letter  from  kda  stating  that  the  hardware 
procurement  for  isis  would  be  a  sole-source  contract  under  $1  million. 
According  to  the  usa  officials,  only  sole-source  procurements  that 
exceed  $1  million  at  tins  require  usa  approval.  In  clarifying  the  mis  com¬ 
ments.  an  kda  official  stated  that  the  sole-source  hardware  procurement 
had  been  approved  by  mis’  Office  of  the  Secretary  but  not  by  usa. 

We  believe  that  kda’  ;  investment  in  dkc  equipment,  its  commitment  to 
ORACLE,  and  the  need  to  interface  with  existing  systems  are  not  suffi¬ 
cient  reasons  to  use  vendor-specific  make  and  model  specifications.  At 
the  time  of  our  audit,  kda  had  not  developed  a  justification  for  using 
make  and  model  specifications.  As  we  state  on  page  4.  the  functional 
requirements  of  isis  do  not  show  a  unique  need  that  would  justify  the 
specification  of  a  particular  hardware  or  software.  Other  types  of  hard¬ 
ware  and  software  are  capable  of  fulfilling  the  functional  requirements 
and  are  compatible  with  existing  dkc  equipment,  mis  said  kda  will 
develop  a  justification  to  support  the  acquisition  on  specific  make  and 
model  before  proceeding  writh  the  procurement. 

ti.  mis  said  another  consideration  is  that  kda  needs  to  bring  isis  on-line  as 
quickly  as  possible,  and  to  interrupt  the  process  at  this  time  to  restruc¬ 
ture  the  hardware  and  software  requirements  would  further  delay 
obtaining  much-needed  computer  equipment. 

We  disagree.  The  need  to  implement  a  system  quickly  is  not  sufficient 
reason  to  use  make  and  model  specifications.  The  Federal  Information 
Resources  Management  Regulations  (41  CFR  201-1  1  )  state  that  the  lack 
of  advance  planning  cannot  be  used  as  a  basis  for  not  conducting  full 
and  open  competition.  The  regulations  also  state  that,  in  order  to  ensure 
full  and  open  competition,  proper  management  activities  must  be  accom¬ 
plished  before  contract  actions  become  imminent. 

7.  mis  concurred  that  kda  should  identify  its  requirements  for  an  isis 
automated  interface  with  Customs,  and  obtain  agreement  on  a  plan  to 
implement  the  automated  interface,  mis  stated  that  kda  has  identified  its 
interface  requirements  and  has  communicated  its  data  requirements  to 
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Customs,  mis  also  said  that  kda  has  met  with  representatives  of  the  bro¬ 
kers  association  to  explore  an  interface,  mis  said  it  believes  that  kda 
must  automate  this  critical  function  to  maintain  its  current  coverage  of 
imported  products,  mis  said  that  the  design  of  isis  is  such  that  additional 
functions  can  readily  be  added  without  the  need  to  either  purchase  new 
equipment  or  to  reconfigure  any  software  applications. 

We  agree  with  mis  that  a  direct  interface  with  Customs  should  be  imple¬ 
mented.  We  believe  that  kda  has  not  adequately  dealt  with  the  isis  inter¬ 
face  issue.  As  we  state  on  pages  5  and  (i.  the  kda  task  force  has 
postponed  identifying  and  planning  for  the  interface  requirements  until 
after  the  basic  isis  system  is  operational  because  kda  and  Customs  offi¬ 
cials  have  been  unable  to  agree  on  the  specifics  of  an  automated  inter¬ 
face.  kda  officials  also  stated  that  the  product  code  differences  and  the 
lack  of  data  on  imports  below  Customs'  dollar  threshold  were 
unresolved  and  were  obstacles  to  an  interface.  Unless  the  interface 
issues  are  resolved,  kda  is  jeopardizing  its  planned  interface  with  Cus¬ 
toms'  systems  in  the  later  stages  of  isis  and  increasing  the  risk  that  the 
system  may  not  satisfy  mission  requirements  in  a  timely  and  effective 
manner. 

8.  mis  stated  that  kda  will  continue  negotiations  with  Customs  regarding 
the  unresolved  interface  problems  and  a  direct  interface  will  be  effected 
as  soon  as  practical. 

We  agree  that  continued  negotiations  between  kda  and  Customs  are  cru¬ 
cial  to  accomplishing  this  important  interface.  But,  as  we  state  on  page 
5,  discussions  have  taken  place  since  at  least  1984  without  an  interface 
agreement.  We  believe  that  the  interface  plans  must  be  completed  to 
ensure  that  the  systems  will  interface  without  unduly  increasing  risks 
that  major  changes  in  isis  will  be  needed,  and  kda  can  efficient  ly  obtain 
all  of  the  data  it  needs,  when  it  is  needed.  We  also  noted  that  on  page  1 
of  its  July  21,  1988,  letter  (see  anp.  IV),  Customs  states  that  it  will  in  the 
near  future  be  adopting  an  internationally  set  standard  of  product  iden¬ 
tification  codes.  According  to  Customs,  once  this  new  set  of  codes  is 
adopted,  there  will  be  no  incentive  for  Customs  to  recommend  any 
change  to  its  product  identifiers  to  match  I  da's.  Therefore.  Customs 
said,  it  believes  it  would  be  in  kda's  best  interests  to  explore  the  possible 
translation  of  its  product  codes  into  the  international  standard. 

9.  mis  concurred  that  kda  should  explore  feasible  alternative  system 
designs  to  meet  the  functional  requirements  of  isis.  mis  stated  that  i  da 
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explored  alternative  system  designs,  but  did  not  fully  document  them, 
mis  said  fda  will  complete  documentation  of  those  exploratory  efforts. 

We  agree  that  fda  should  document  the  alternative  system  designs  for 
isis,  as  required  by  the  regulations.  As  noted  on  pages  4  and  5,  during 
our  audit  we  found  no  evidence  that  alternatives  were  explored,  ana¬ 
lyzed,  documented,  or  presented  for  management  consideration. 
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report  text  appear  at  the 
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July  21,  1988 


See  comment  1 


See  comment  1 
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See  comment  1 


See  comment  1 
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Dear  Mr .  Car  lone : 

Wo  have  reviewed  your  draft  report  on  ADP  SYSTEMS:  FDA  Can 
Reduce  Development  Risks  For  Its  import  Information  System.  We 
believe  the  report  is  generally  accurate  in  its  conclusions  and 
recommendations.  However,  some  assertions  in  the  report 
concerning  Customs  cooperation  with  FDA  and  Customs  abilities  to 
assist  FDA  in  the  performance  of  its  mission  need  to  be 
clarified. 

Specifically,  several  issues  touched  upon  on  pages  six  and 
seven  of  the  report  require  clarification. 

The  different  product  cod ing  schemes  used  by  the  two 
agencies  should  not  prevent  an  interface  between  ►he  two 
automated  systems.  The  specific  name  of  the  merenandise 
reflected  in  the  FDA  product  code  could  be  supplied  to  the 
broke r/ impor ter  beforehanu  and  entered  as  an  additional  data 
element  on  the  appropriate  document.  Currently,  steps  are  being 
taken  to  attempt  some  alignment,  if  possible,  between  the  Customs 
Natio-'al  Import  Specialists  and  the  International  Trade 
Commission  with  FDA. 

It  should  also  be  recognized  that  Customs  will  be  utilizing 
in  the  near  future,  an  internationally  set  standard  of  product 
identification  codes  known  as  the  Harmonized  System.  Once  this 
is  adopted,  there  will  be  no  incentive  tor  Customs  to  recommend 
any  change  to  its  product  identifiers  to  match  FDA’s.  It  would 
be  in  FDA’s  best  interests  to  explore  the  possible  translation  of 
its  product  codes  into  the  Harmonized  System. 

Other  additional  data  required  for  release  of  FDA 
merchandise  are  now  being  provided  by  the  broker/ i mpor tor  and  m 
some  instances  are  provided  using  specialized  software  developed 
by  companies  servicing  brokers  and  importers  that  import  FDA 
merchandise.  The  collection  and  transmission  of  these  additional 
FDA  data  elements  from  the  invoice  and  other  sources  to  ACS 
through  ABI  or  data  shown  on  the  CF  7901  which  will  also  be 
captured  electronically  should  not  hinder  the  development  of  an 
interface  between  Customs  and  FDA. 
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See  comment  2 


See  comment  2 


See  comment  3. 


See  comment  4 


In  some  instances,  Customs  does  collect  data  for  commercial 
merchandise  imported  with  a  value  of  less  than  $1,000  ($250  for 
certain  textiles)  for  enforcement  and  duty  collection  purposes. 
Many  commercial  import  entries  below  the  $1,000  limit  are 
presented  on  informal  entries  and  ace  transmitted  electronically 
through  ABI.  This  information  could  easily  be  transmitted  to 
FDA  . 


We  do  agree  that  at  this  time  many  informal  entries  are  not 
captured  within  the  system.  The  Census  Bureau,  which  provides 
FDA  with  much  of  its  import  information,  does  not  collect  this 
i  n  forma t ion . 

Finally,  there  are  methods  by  which  Customs  can  target  and 
detain  a  product  of  a  single  importer  at  a  single  port.  Not  only 
does  Customs  have  the  ability  to  achieve  targeting  through 
national  selectivity  criteria  but  it  can  also  limit  it  to  a 
specific  importer,  product,  or  port  through  local  criteria.  This 
request  can  be  passed  by  FDA  to  Customs  either  by  memoranda  or 
through  an  electronic  mail  application  from  an  FDA  personal 
computer  to  the  Customs  E-Mail  system. 

For  your  information.  Customs  has  developed,  and  is  in  the 
process  of  implementing,  a  work  plan  to  assist  FDA  in  a  future 
interface.  Customs  has  been  working  with  FDA  in  the  past  and  is 
assisting  them  in  system  development  and  implementing  operational 
efficiencies  for  both  agencies.  We  are  confident  of  further 
cooperative  efforts  with  FDA  in  the  future. 

Should  any  clarification  of  our  response  be  required,  please 
contact  Mr.  Matthew  J.  Krimski  of  the  Day  One  project  on  566- 
893  3  . 

yours  faithfully, 


Mr.  kalph  v.  Carlone 

Director,  Information  Management 

and  Technology  Division 

United  States  General  Accounting  Office 
Washington,  D.C.  20548 
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The  following  are  gao’s  comments  on  a  letter  dated  July  21,  1988,  from 
the  U.S.  Customs  Service. 


GAO  Comments 


1 .  The  Commissioner  of  Customs  said  he  believed  the  conclusions  and 
recommendations  were  generally  accurate.  He  added  that  several  issues 
in  the  report  required  clarification.  The  Commissioner  said  the  different 
product  coding  schemes  used  by  the  two  agencies  should  not  prevent  an 
interface  between  the  two  automated  systems.  He  said  the  specific  mer¬ 
chandise  name  in  fda’s  code  could  be  added  as  an  additional  data  ele¬ 
ment;  steps  are  being  taken  to  attempt  some  alignment  between  the 
Customs  National  Import  Specialists,  International  Trade  Commission, 
and  fda;  and  other  additional  data  required  for  fda’s  release  of  merchan¬ 
dise  will  be  captured  by  Customs.  The  Commissioner  also  noted  that 
after  Customs  adopts  an  internationally  set  standard  of  codes  (called  the 
Harmonized  System)  to  identify  products,  it  will  have  no  incentive  to 
recommend  changes  to  its  product  identifiers  to  match  fda's  codes.  In 
this  regard,  he  said  it  would  be  in  fda’s  best  interests  to  explore  the  use 
of  this  new  code. 

The  Commissioner  pointed  out  some  ways  that  may  help  in  the  develop¬ 
ment  of  an  automated  interface  with  fda.  As  we  discuss,  fda  and  Cus¬ 
toms  have  recognized  the  need  to  agree  on  an  automated  interface  and 
have  discussed  developing  one  since  at  least  1984.  One  of  the  problems 
cited  by  officials  is  that  Customs  and  fda  use  different  product  coding 
schemes  and  have  not  agreed  on  a  scheme  that  would  satisfy  both  agen¬ 
cies.  fda’s  task  force  told  us  it  was  postponing  further  actions  to  identify 
and  plan  for  fda’s  interface  requirements  until  after  the  basic  isis  system 
became  operational. 

As  we  state  on  page  5,  postponing  such  action  could  jeopardize  fda’s 
planned  interface  with  Customs’  systems  in  later  stages  of  isis  to  (1)  pro¬ 
vide  two-way  electronic  communication  among  Customs,  importers,  and 
fda;  (2)  electronically  capture  data  on  all  import  entries  within  fda’s 
jurisdiction;  and  (3)  eliminate  most  of  the  paper  transactions  among  fda, 
Customs,  and  importers,  fda  task  force  officials  agreed  that  there  may 
be  problems  when  the  interface  is  attempted  at  a  later  stage  of  isis. 

2.  The  Commissioner  pointed  out  that,  in  some  instances,  Customs  does 
collect  data  on  commercial  merchandise  entries  valued  at  below  $1,000. 
He  added  that  this  information  could  easily  be  transmitted  to  fda.  The 
Commissioner  did  agree  that  many  informal  entries  are  not  captured 
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within  the  system  because  the  Census  Bureau  does  not  collect  this 
information. 

As  we  discuss  on  page  6,  fda  said  it  needs  to  collect  data  on  all  fda- 
regulated  imports.  Not  receiving  information  on  all  entries  below  a  cer¬ 
tain  dollar  amount  was  cited  as  another  problem  affecting  the  resolution 
of  an  automated  interface.  As  noted  earlier,  we  believe  theso  problems 
must  be  resolved  and  recommend  that  fda  identify  its  requirements  for 
an  automated  interface  with  Customs,  and  obtain  an  agreement  on  a 
plan  to  implement  the  automated  interface. 

3.  The  Commissioner  pointed  out  that  there  are  methods  that  Customs 
can  use  to  target  and  detain  a  product  of  a  single  importer  at  a  specific 
port.  He  said  fda  can  request  this  of  Customs,  by  memorandum  or  elec¬ 
tronic  mail  application  to  Customs’  electronic  mail  system. 

As  discussed  on  page  6,  fda  task  force  officials  cited  this  as  a  problem 
and  told  us  that  if  fda  asked  Customs  to  detain  a  product  of  a  specific 
importer  at  a  specific  port,  Customs’  Automated  Commercial  System 
would  not  direct  the  detainment  message  only  to  the  port  requested. 

We  discussed  the  use  of  Customs’  electronic  mail  system  with  a  Customs 
official.  According  to  the  official,  fda  could  use  any  of  several  ways  to 
have  a  message  sent  on  the  electronic  mail  system  to  any  or  all  ports. 
Although  the  electronic  mail  system  is  not  part  of  Customs'  Automated 
Commercial  System,  fda  would  have  access  to  it  through  the  automated 
interface  with  Customs,  once  it  is  developed. 

4.  The  Commissioner  said  that  Customs  is  implementing  a  work  plan  to 
assist  fda  in  a  future  interface.  He  said  Customs  has  been  working  with 
fda  to  develop  the  interface  and  he  is  confident  of  future  cooperative 
efforts. 

As  we  discuss  on  page  5,  officials  of  the  two  agencies  have  been  discuss¬ 
ing  the  automated  interface  for  a  few  years.  We  are  not  suggesting  that 
the  agencies  have  not  cooperated  with  each  other.  Our  purpose  is  to  note 
that  an  agreement  on  the  automated  interface  for  t  he  isis  system  has  not 
yet  been  achieved. 
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